Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76185e0a-7b1b-3748-987b-469b3e03e06a.roa
File:                     76185e0a-7b1b-3748-987b-469b3e03e06a.roa (raw, json)
Hash identifier:          oZv5EEIZdnzqmdnijGTdEHK9x7rogt462V+vkEokSkM=
Subject key identifier:   E0:C2:06:57:C6:C7:F2:58:27:AA:F6:0C:B0:56:8E:89:80:17:E9:FE
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584988CF1D32A6E12AB3CAC43E70
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76185e0a-7b1b-3748-987b-469b3e03e06a.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     398391
IP address blocks:        64.226.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:1d:32:a6:e1:2a:b3:ca:c4:3e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=5deea1b4-b1b5-40cf-b395-8196b630d05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:ec:29:68:62:4c:f0:38:d1:b8:0f:a0:2d:
                    84:74:35:a8:2e:97:b7:0c:77:f5:df:ed:36:59:31:
                    f8:4b:ac:08:f0:9c:fc:cc:ce:ee:82:10:48:24:35:
                    aa:a2:7e:91:a8:eb:9a:1e:b4:fc:d1:ae:52:df:6e:
                    c4:3d:ba:89:96:49:6a:aa:a3:3d:10:8d:aa:db:92:
                    aa:51:9f:65:83:67:a0:2d:c6:2d:f3:2f:f7:ba:c4:
                    3e:6b:55:98:04:95:57:9e:70:27:c6:71:76:da:a9:
                    79:5a:a8:fb:36:d2:0e:e7:2c:f5:91:7d:62:16:cb:
                    e7:86:76:b8:e8:ba:c1:dd:9b:fe:e1:6c:40:e1:ee:
                    ea:1d:12:4a:b9:40:3f:a8:25:8f:1c:48:62:d6:bc:
                    1e:45:d9:a7:af:0d:a0:4b:78:a4:2f:e7:ff:cc:a0:
                    64:5e:0a:76:ca:87:5f:52:db:85:8a:18:f2:18:43:
                    ed:92:c8:48:e3:23:ee:f1:81:d9:88:0c:f5:34:ab:
                    5b:56:dd:c3:63:b8:2e:ba:13:a1:45:3d:b8:99:1a:
                    d2:e8:87:19:6f:2b:4e:7e:19:48:44:1d:b7:7b:b3:
                    c0:c5:65:44:a5:88:29:7a:65:2a:a1:33:fa:78:f9:
                    ce:8d:6c:a3:f6:e5:99:33:d7:4b:33:b5:b6:05:ad:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C2:06:57:C6:C7:F2:58:27:AA:F6:0C:B0:56:8E:89:80:17:E9:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76185e0a-7b1b-3748-987b-469b3e03e06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:4d:19:67:a6:29:11:8f:03:bb:35:5c:d8:1c:68:26:cc:0b:
         e1:b2:b9:44:52:6b:59:8f:99:17:d4:f7:7c:29:fc:c1:7b:d9:
         6a:bd:7b:04:0f:5f:2c:80:80:d7:86:36:db:6d:3d:5f:95:55:
         16:e9:40:12:ee:2e:96:6b:a1:aa:e9:06:21:28:0a:6d:ee:3d:
         94:2a:96:c6:5e:1f:2a:ab:15:ee:8e:fc:53:d1:c0:7f:5f:97:
         4f:f3:e7:33:2d:c0:5d:54:ee:6f:7c:e7:6b:02:35:76:15:49:
         ae:66:71:01:8f:e9:70:64:71:ce:91:20:7d:84:62:a3:19:85:
         86:70:ef:96:93:3b:c4:2d:9e:bf:6c:63:5f:87:52:b6:0a:fb:
         e6:65:d3:ae:26:63:52:f5:85:eb:2f:5c:b3:f0:cd:9f:4d:22:
         0e:5b:e5:cd:be:a6:02:21:34:8c:cf:d1:c7:49:85:a6:ef:bf:
         03:35:20:6a:42:3f:65:f3:2f:7e:60:88:26:dc:be:5c:32:c3:
         56:76:47:6a:91:0c:aa:23:8d:8b:d9:7d:c9:10:f8:34:8f:6c:
         37:86:01:15:60:cb:02:d1:c4:ae:ee:7c:f6:51:d3:d1:23:be:
         15:84:b3:46:90:aa:bc:a2:a2:c5:38:99:26:1a:ac:c0:b1:06:
         93:f2:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:26 2025 by rpki-client